SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:3384-1)

This update for perl-DBI fixes the following issues : DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:3385-1)

This update for perl-DBI fixes the following issues : DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 Note that Tenable Network Security has extracted the preceding...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2020-2501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : perl-DBI (openSUSE-2020-2064)

This update for perl-DBI fixes the following issues : - DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15-SP2:Update update...

openSUSE Security Update : perl-DBI (openSUSE-2020-2051)

This update for perl-DBI fixes the following issues : - DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15:Update update...

SUSE-SU-2020:3385-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402...

CVE-2014-10402

creationtimestamp| type| source ---|---|--- 2020-09-16 20:55:50+00:00| seen| https://t.me/cibsecurity/14694...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

CVE-2014-10402

CVE-2014-10402 affects the Perl DBI module (DBD::File drivers) up to version 1.643. The flaw allows opening files from folders outside the DSN-specified f_dir attribute in the data source name, due to an incomplete fix for CVE-2014-10401. This can lead to information disclosure. A patch exists; D...

CVE-2020-10402

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-category.php by adding a question mark ? followed by the payload...

CVE-2020-10402

CVE-2020-10402 corresponds to a Reflected XSS in Chadha PHPKB Standard Multi‑Language 9. Red Hat entries corroborate the issue affecting URIs handled in admin/header.php, enabling payloads when accessing admin/edit-category.php (and related admin pages for CVEs 10391/10456). The root cause is imp...

Jenkins < 2.176.4 LTS / 2.197 Multiple Vulnerabilities

The version of Jenkins running on the remote web server is prior to 2.197 or is a version of Jenkins LTS prior to 2.176.4. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in the /whoAmI/ URL due to the exposed 'Cookie' HTTP Header. An...

CVE-2019-10402

CVE-2019-10402 affects Jenkins up to version 2.196 and earlier, and LTS up to 2.176.3 and earlier. The f:combobox form control interprets item labels as HTML, causing a stored XSS vulnerability exploitable by users with permission to define its contents. Reported in related advisories (e.g., Jenk...

CVE-2019-10402

In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents...

CVE-2017-10402

The CVE-2017-10402 vulnerability affects Oracle Hospitality Reporting and Analytics (subcomponent: Report) within Oracle Hospitality Applications, specifically versions 8.5.1 and 9.0.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise the Reporting and Analy...

CVE-2016-10402

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow...

CVE-2016-10402

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow...